Update to new 1.6.4 release
This commit is contained in:
parent
2aadaa22e0
commit
68df4ac0d2
1
.gitignore
vendored
1
.gitignore
vendored
@ -15,3 +15,4 @@
|
|||||||
/mod_auth_gssapi-1.6.1.tar.gz
|
/mod_auth_gssapi-1.6.1.tar.gz
|
||||||
/mod_auth_gssapi-1.6.2.tar.gz
|
/mod_auth_gssapi-1.6.2.tar.gz
|
||||||
/mod_auth_gssapi-1.6.3.tar.gz
|
/mod_auth_gssapi-1.6.3.tar.gz
|
||||||
|
/mod_auth_gssapi-1.6.4.tar.gz
|
||||||
|
@ -1,35 +0,0 @@
|
|||||||
From 915a3d7fca3beefadd751562abe2d481354a2a9c Mon Sep 17 00:00:00 2001
|
|
||||||
From: Robbie Harwood <rharwood@redhat.com>
|
|
||||||
Date: Tue, 24 Aug 2021 15:04:13 -0400
|
|
||||||
Subject: [PATCH] crypto: Handle EVP changes in OpenSSL 3
|
|
||||||
MIME-Version: 1.0
|
|
||||||
Content-Type: text/plain; charset=UTF-8
|
|
||||||
Content-Transfer-Encoding: 8bit
|
|
||||||
|
|
||||||
OpenSSL 3 changes the padding behavior of EVP_DecryptFinal_ex(), which
|
|
||||||
causes our decryption to fail. It is the opnion of the OpenSSL
|
|
||||||
developers that mod_auth_gssapi's use of this function was incorrect.
|
|
||||||
|
|
||||||
Patch suggested by Tomáš Mráz.
|
|
||||||
|
|
||||||
Related: https://github.com/openssl/openssl/issues/16351
|
|
||||||
|
|
||||||
Signed-off-by: Robbie Harwood <rharwood@redhat.com>
|
|
||||||
(cherry picked from commit 06d1f7d36d2455747e6e8231d28e6524ea1181f1)
|
|
||||||
---
|
|
||||||
src/crypto.c | 2 +-
|
|
||||||
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
||||||
|
|
||||||
diff --git a/src/crypto.c b/src/crypto.c
|
|
||||||
index 3f372a0..b3f7fd9 100644
|
|
||||||
--- a/src/crypto.c
|
|
||||||
+++ b/src/crypto.c
|
|
||||||
@@ -262,7 +262,7 @@ apr_status_t UNSEAL_BUFFER(apr_pool_t *p, struct seal_key *skey,
|
|
||||||
|
|
||||||
totlen += outlen;
|
|
||||||
outlen = plain->length - totlen;
|
|
||||||
- ret = EVP_DecryptFinal_ex(ctx, plain->value, &outlen);
|
|
||||||
+ ret = EVP_DecryptFinal_ex(ctx, plain->value + totlen, &outlen);
|
|
||||||
if (ret == 0) goto done;
|
|
||||||
|
|
||||||
totlen += outlen;
|
|
@ -1,5 +1,5 @@
|
|||||||
Name: mod_auth_gssapi
|
Name: mod_auth_gssapi
|
||||||
Version: 1.6.3
|
Version: 1.6.4
|
||||||
Release: %autorelease
|
Release: %autorelease
|
||||||
Summary: A GSSAPI Authentication module for Apache
|
Summary: A GSSAPI Authentication module for Apache
|
||||||
|
|
||||||
@ -7,8 +7,6 @@ License: MIT
|
|||||||
URL: https://github.com/gssapi/mod_auth_gssapi
|
URL: https://github.com/gssapi/mod_auth_gssapi
|
||||||
Source0: https://github.com/gssapi/%{name}/releases/download/v%{version}/%name-%{version}.tar.gz
|
Source0: https://github.com/gssapi/%{name}/releases/download/v%{version}/%name-%{version}.tar.gz
|
||||||
|
|
||||||
Patch0: crypto-Handle-EVP-changes-in-OpenSSL-3.patch
|
|
||||||
|
|
||||||
BuildRequires: httpd-devel, krb5-devel, openssl-devel
|
BuildRequires: httpd-devel, krb5-devel, openssl-devel
|
||||||
BuildRequires: autoconf, automake, libtool, bison, flex, make
|
BuildRequires: autoconf, automake, libtool, bison, flex, make
|
||||||
BuildRequires: git
|
BuildRequires: git
|
||||||
|
2
sources
2
sources
@ -1 +1 @@
|
|||||||
SHA512 (mod_auth_gssapi-1.6.3.tar.gz) = 37ac1931c5be962e025bcc71eba377947b5b79bc270c384c0a03b2fb1ecfdefcad5f07b4d1f9dc3c7e2dfefa7f6ee4167cf6df6c1b8c0f24267afae55bfe29d5
|
SHA512 (mod_auth_gssapi-1.6.4.tar.gz) = 9e608319daf8303112615781cec6ad897586b0c03c264e70f3bfd44083902d0cdbfe19ff063559f4b3680b81d77e8f9d01cd340ca672ca20057dde510712485d
|
||||||
|
Loading…
Reference in New Issue
Block a user